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1 Coding-based schemes for fault identification in communication networks 

Chi-Chun Lo , Shing-Hong Chen , Bon-Yeh Lin 
— ' International Journal of Network Management May 2000 
Volume 10 Issue 3 

This paper proposes two event correlation schemes for fault identification in communication 
networks. The causality graph model is used to describe the cause-and-effect relationships 
between network events. Copyright © 2000 John Wiley & Sons, Ltd. 
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2 Ecxpert: exploiting event correlation in telecommunications 

□h Yossi Nygate 

^ ACM SIGAPP Applied Computing Review September 1994 
Volume 2 Issue 2 

Today's competitive market place has forced the telecommunications industry to improve their 
service and reliability. One step that telecommunications companies have taken to reduce 
network failures is the installation of operations centers to collect data from network elements. 
These centers are staffed by network managers who monitor network activity by correlating 
alarms across various operational disciplines (switch, facility, traffic) and relating them to a 
common cause. Accurate analysis i ... 



3 Network expert diagnostic system for real-time control 

[xfo Terry L. Janssen 

— Proceedings of the second international conference on Industrial and engineering 
applications of artificial intelligence and expert systems - Volume 1 June 1989 
Data communications networks are controlled by network management systems that are 
responsible for performance and fault management. This paper presents an expert system 
capable of performing fault and performance management through different levels of 
autonomous control. A blackboard architecture design provides for processing of multiple lines 
of machine reasoning and planning: the set of all unresolved events is used to generate 
hypotheses of network state through event correlation and ... 
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The design and performance of a real-time CORBA event service 

Timothy H. Harrison , David L. Levine , Douglas C. Schmidt 
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ACM SIGPLAN Notices , Proceedings of the 1997 ACM SIGPLAN conference on Object- 
oriented programming systems, languages and applications October 1997 
Volume 32 Issue 10 



5 Real-time protocol analysis for detecting link-state routing protocol attacks 8 2% 
Ho-Yen Chang , S. Felix Wu , Y. Frank Jou 

ACM Transactions on Information and System Security (TISSEC) February 2001 
Volume 4 Issue 1 

A real-time knowledge-based network intrusion-detection model for a link-state routing 
protocol is presented for the OSPF protocol. This model includes three layers: a data process 
layer to parse packets and dispatch data; and event abstractor to abstract predefined real- 
time events for the link-state routing protocol; and an extended timed finite state machine to 
express the real-time behavior of the protocol engine and to ... 

6 Monitoring business processes through event correlation based on dependency 82% 
mode! 

Asaf Adii , David Botzer , Opher Etzion , Tali Yatzkar-Haham 

ACM SIGMOD Record , Proceedings of the 2001 ACM SIGMOD international conference 
on Management of data May 2001 
Volume 30 Issue 2 

Events are at the core of reactive and proactive applications, which have become popular in 
many domains. 

This demo shows the monitoring of incoming events as a means to detect possible problems in 
the course of business processes using a dependency model. 

Contemporary modeling tools lack the capability to express the event semantics and 
relationships to other entities. This capability is useful when the events are based on a 
dependency model among business processes, applicat ... 



7 From service configuration through performance monitoring to fault detection: 82% 
[J implementing an integrated and automated network maintenance platform for 
enhancing wide area transaction access services 

Symeon Papavassiliou , Mike Pace 

International Journal of Network Management September 2000 
Volume 10 Issue 5 

The design and implementation of integrated and automated network-service management 
platforms that can seamlessly configure services, monitor service-network performance, and 
detect network faults are of great importance and interest to the service and network 
providers. In this paper we describe a set of integrated Operations Support Systems 
&lpar;OSS&rpar; that implement proactive network maintenance process in Wide Area 
Transaction Access Services. Copyright © 2000 John ... 



8 High-level constructs in the READY event notification system 82% 
Robert E. Gruber , Balachander Krishnamurthy , Euthimios Panagos 

— Proceedings of the 8th ACM SIGOPS European workshop on Support for composing 
distributed applications September 1998 

9 Applying active database models for simulation 82% 

Lfo A. Cornelio , Shamkant B. Navathe 

— ' Proceedings of the 25th conference on Winter simulation December 1993 
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10 Special section on data mining for intrusion detection and threat analysis; 
[J Data mining-based intrusion detectors: an overview of the Columbia IDS 

project 

Salvatore J. Stolfo , Wenke Lee , Philip K. Chan , Wei Fan , Eleazar Eskin 
ACM SIGMOD Record December 2001 
Volume 30 Issue 4 

11 Supporting workflow cooperation within and across organizations 80% 

Fabio Casati , Angela Discenza 
^ Proceedings of the 2000 ACM symposium on Applied computing 2000 March 2000 

12 Event variables - on conditions for APL 770/0 
Thomas J. Harris 

Proceedings of seventh international conference on APL June 1975 

This paper describes the function and use of event variables for APL programs. Event variables 
can be used in a manner analogous to PL1 ON Conditions. Section 1 describes the background 
and case for event variables; section 2 presents implementation considerations; and section 3 
discusses the use of events in an APL working environment. 



13 Steady-state simulation of queueing processes: survey of problems and 
[J solutions 

Krzysztof Pawlikowski 

ACM Computing Surveys (CSUR) June 1990 
Volume 22 Issue 2 

For years computer-based stochastic simulation has been a commonly used tool in the 
performance evaluation of various systems. Unfortunately, the results of simulation studies 
quite often have little credibility, since they are presented without regard to their random 
nature and the need for proper statistical analysis of simulation output data. This paper 
discusses the main factors that can affect the accuracy of stochastic simulations designed to 
give insight into the steady-st ... 



14 Session C2: information visualization: Case study: interactive visualization for 77% 
[jj internet security 

Soon Tee Teoh , Kwan Liu Ma , S. Felix Wu , Xiaoliang Zhao 

Proceedings of the conference on Visualization '02 October 2002 

Internet connectivity is defined by a set of routing protocols which let the routers that 
comprise the Internet backbone choose the best route for a packet to reach its destination. 
One way to improve the security and performance of Internet is to routinely examine the 
routing data. In this case study, we show how interactive visualization of Border Gateway 
Protocol (BGP) data helps characterize routing behavior, identify weaknesses in connectivity 
which could potentially cripple the Internet, a ... 



15 Session 9D: embodied agents: Object persistence for synthetic creatures 

Damian A. Isla , Bruce M. Blumberg 

Proceedings of the first international joint conference on Autonomous agents and 
multiagent systems: part 3 July 2002 

We present methods for anticipatory behavior in simulated graphical creatures. We discuss in 
general terms the importance of anticipatory behavior through explicit expectation formation. 
We present an in-depth description of a specific type of expectation-formation, namely 
location-expectation, or object persistence. A new representation - the Probabilistic Occupancy 
Map (POM) - is presented, and it is shown how this representation can be used to maintain 
estimations of the positions of mobile 0 ... 
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16 XML Applications: An event-condition-action language for XML 
[3) James Bailey , Alexandra Poulovassilis , Peter T. Wood 

^ Proceedings of the eleventh international conference on World Wide Web May 2002 

XML repositories are now a widespread means for storing and exchanging information on the 
Web. As these repositories become increasingly used in dynamic applications such as e- 
commerce, there is a rapidly growing need for a mechanism to incorporate reactive 
functionality in an XML setting. Event-condition-action (ECA) rules are a technology from 
active databases and are a natural method for supporting suchfunctionality. ECA rules can be 
used for activities such as automatically enforcing documen ... 

17 Contributed articles: Report on the workshop on research issues in data 770/0 
mining and knowledge discovery workshop (DMKD 2001) 
Roberto Bayardo , Johannes E. Gehrke 
ACM SIGKDD Explorations Newsletter July 2001 
Volume 3 Issue 1 

This short article summarizes the program of the Sixth Workshop on Research Issues in Data 
Mining and Knowledge Discovery Workshop (DMKD 2001). 

18 Pushing reactive services to XML repositories using active rules 770/0 

Angela Bonifati , Stefano Ceri , Stefano Paraboschi 

Proceedings of the tenth international conference on World Wide Web April 2001 

19 A requires/provides mode! for computer attacks 770/0 

Steven J. Templeton , Karl Levitt 

Proceedings of the 2000 workshop on New security paradigms February 2001 

20 A simple packet aggregation technique for fault detection 770/0 

Akira Kanamaru , Kohei Ohta , Nei Kato , Glenn Mansfield 
International Journal of Network Management July 2000 
Volume 10 Issue 4 

Packet monitoring has become a standard technique in network management and when 
applied to a large-scale transit network yields a high volume of packets. To overcome this 
problem, we discuss the behavior of packets and present a symptom-based packet 
aggregation technique which is useful for fault detection. Copyright © 2000 John Wiley & 
Sons, Ltd. 
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